All news in category “Vendor and Hyperscaler Watch”

🔍 AWS Systems Manager Configuration Manager can now automatically test SAP ABAP applications on AWS against best practices defined in the AWS Well-Architected Framework SAP Lens. Customers can schedule assessments or run checks on demand for SAP HANA and ABAP workloads. The service identifies misconfigurations and provides concrete remediation steps. SSM for SAP Configuration Manager is available in Regions where SSMSAP is offered.

🚀 Amazon Web Services has made memory-optimized Amazon EC2 X2iedn instances available in the AWS Europe (Zurich) region. These instances use 3rd generation Intel Xeon Scalable processors and the AWS Nitro System to deliver improved performance, better price performance, and lower cost per GiB of memory versus prior X1e instances. They are SAP-certified for a broad set of HANA and NetWeaver workloads.

🚀 AWS has announced the general availability of Elastic Beanstalk in five additional regions: Asia Pacific (New Zealand) (Melbourne), Asia Pacific (Malaysia), Asia Pacific (Hyderabad), Canada West (Calgary), and Europe (Zurich). The managed application platform automates deployment, capacity provisioning, load balancing, auto-scaling, and health monitoring. This expansion gives developers more regional choices for lower latency and data residency compliance. Customers should verify regional service availability and update deployment configurations as needed.

🔐 Organizations face rising complexity as AI and sprawling systems make policy and compliance management touch every application. Deloitte has helped industrial and financial customers by linking named users to accounts, surfacing privileged and unvaulted accounts, and automating contact and remediation to reduce manual work. That improved SOC telemetry and cut time mapping incidents to MITRE ATT&CK. Meanwhile, apexanalytix uses Azure Active Directory and conditional access to detect risky sign-ins, impossible travel, and enforce geographic boundaries.

🔍 CrowdStrike has expanded exposure management with Falcon Exposure Management, merging continuous telemetry, AI-driven prioritization, and a unified Risk Knowledge Base to reduce noise and accelerate remediation. The Exposure Prioritization Agent reasons in real time about exploitability, environment-specific preconditions, and business impact to deliver actionable “fix first” recommendations. AI Discovery surfaces LLMs, MCP servers, and AI agents to map the emerging AI attack surface and associated risks, integrating natively with Falcon telemetry and SOAR workflows.

🔒 The AWS European Sovereign Cloud introduces the Sovereign Reference Framework (ESC-SRF), an independently validated set of governance, technical, and operational controls to address strict European sovereignty requirements. The ESC-SRF aligns criteria such as governance independence, data residency, and technical isolation to concrete controls and will be available through AWS Artifact. Customers and partners can use the framework as an assurance model or adapt it to design their own sovereignty controls.

🚀 Amazon Aurora DSQL now provisions clusters in seconds, cutting setup time from minutes to near-instant. Developers can immediately use the integrated query editor in the AWS Console to prototype or build without configuring external clients or connecting through the Aurora DSQL Model Context Protocol (MCP) server. The change supports both prototyping and production workloads while preserving Aurora DSQL’s scalability, active-active high availability, zero infrastructure management, and pay-for-what-you-use pricing. The enhancement is available in all Regions where Aurora DSQL is offered and is accessible via the AWS Free Tier.

🔒 Palo Alto Networks announces that Prisma Browser has been named the best-positioned market leader in the Frost Radar: Zero Trust Browser Security (ZTBS), 2025 report, recognized for both innovation and growth. The vendor frames the browser as the enterprise 'OS' where 85% of work occurs and 95% of security incidents originate, emphasizing the urgent need for native browser defenses. Powered by Precision AI, Cloud-Delivered Security Services and embedded Enterprise DLP, Prisma Browser inspects live, fully rendered content to detect evasive AI-driven phishing, zero-day browser exploits and malicious extensions. Combined with Advanced WildFire, URL Filtering and runtime extension security, the solution delivers last-mile protection without disrupting user workflows.

🤖 GPT-5.2 is now generally available in Microsoft Foundry, positioned as a reasoning-first foundation model for enterprise applications. It advances GPT-5.1 with deeper logical chains, expanded context handling, and agentic execution to produce shippable artifacts—design docs, runnable code, tests, and deployment scripts—with fewer iterations. The release emphasizes integrated enterprise controls, managed identities, and policy enforcement to support secure, governed adoption.

🔒 Amazon WorkSpaces Secure Browser now includes Web Content Filtering, allowing administrators to define granular access policies, block specific URLs or entire domain categories using 25+ predefined categories, and integrate with Session Logger for enhanced monitoring and compliance. While existing Chrome policies remain supported, this category-based approach delivers richer control, improved logging, and centralized policy management. The feature is available at no additional cost in 10 AWS Regions and supports pay-as-you-go pricing, with console enablement and automatic migration of URL blocklists and allowlists.

📈 This article describes a multi-agent business forecasting application developed by Google Cloud and App Orchid. The design pairs a Google prediction agent (leveraging TimesFM and the Population Dynamics Foundation Model) with an App Orchid Data Agent that builds a semantic knowledge graph and prepares AI-ready time-series. A forecasting orchestrator uses the A2A Protocol and Google’s ADK to route queries, automate data wrangling, run predictions on Gemini-powered Vertex AI, and return unified forecasts with enterprise-grade security and governance.

🔒 Microsoft will now pay bounties for critical vulnerabilities that directly impact any of its online services, whether the flawed code is Microsoft-owned, third-party, or open source. Announced by Tom Gallagher at Black Hat Europe, the change makes all current and newly launched Microsoft online services in-scope by default. The move aims to steer researcher attention to high-risk areas and accelerate remediation. Microsoft said it paid over $17 million to security researchers in the past year.

🤖 Microsoft announced a significant set of Azure Storage updates at Ignite 2025 and KubeCon to accelerate AI workloads, cloud-native applications, and migrations. Azure Blob Storage now targets exabyte-scale capacity and multi-tens of Tbps throughput, while Azure Managed Lustre (AMLFS 20 preview) offers 25 PiB namespaces, 512 GBps and HSM with auto-import/export. Additional enhancements — Premium Blob, Smart Tier, Azure Elastic SAN auto-scaling, Ultra Disk latency and cost improvements, Storage Discovery and Copilot, and expanded migration tooling — focus on low-latency inferencing, continuous GPU feeding for training, operational elasticity, and simplified data migrations.

🔒Amazon Cognito identity pools now support AWS PrivateLink, enabling private connectivity between your VPC and Cognito to exchange federated identities for temporary AWS credentials. This removes the need to route authentication traffic over the public internet and reduces exposure of auth flows. PrivateLink endpoints are available in all Regions where Cognito identity pools operate except AWS China (Beijing) and AWS GovCloud (US); standard PrivateLink charges apply.

🚀 AWS announces integration of Amazon Aurora PostgreSQL-Compatible Edition with Kiro powers, enabling agent-assisted database development using prepackaged MCP servers, steering files, and hooks. The Aurora PostgreSQL power bundles data plane (queries, schema) and control plane (cluster creation) capabilities with targeted best-practice guidance. Available via Kiro IDE and the Kiro powers catalog for one-click installation across AWS Regions.

🔔 Amazon Web Services has expanded availability of its High Memory U7i instances to additional regions: Frankfurt now supports the 24TiB u7in-24tb.224xlarge, Mumbai supports the 16TiB u7in-16tb.224xlarge, and Paris supports the 6TiB u7i-6tb.112xlarge. These instances use custom 4th‑generation Intel Xeon Scalable processors (Sapphire Rapids) and DDR5 memory, offering up to 896 vCPUs, up to 200Gbps networking, 100Gbps EBS throughput, and ENA Express. They target mission‑critical in‑memory databases such as SAP HANA, Oracle, and SQL Server.

🚀 Amazon Web Services has made Storage Optimized EC2 I7i instances available in Asia Pacific (Singapore, Jakarta) and Europe (Stockholm). Powered by 5th generation Intel Xeon Scalable processors (3.2 GHz all‑core turbo) and 3rd generation AWS Nitro SSDs, I7i delivers up to 23% better compute and over 10% improved price performance versus I4i, plus up to 45 TB NVMe with significant gains in real‑time storage performance and lower latency. The family spans eleven sizes (nine virtual up to 48xlarge, two bare metal), offers up to 100 Gbps network and 60 Gbps EBS bandwidth, and includes a torn write prevention feature supporting 16 KB block sizes.

🔔 Starting today, AWS has made C7i EC2 instances available in the Asia Pacific (Hyderabad) Region. These instances use custom 4th Gen Intel Xeon Scalable (Sapphire Rapids) processors and deliver up to 15% better price-performance versus C6i, with sizes up to 48xlarge and two bare-metal options. Features include Intel AMX support, built-in accelerators and the ability to attach up to 128 EBS volumes to scale and speed compute-intensive workloads.

🌐 AWS Application Migration Service (MGN) now supports IPv6 for both service communication and application migrations. Organizations can use dual-stack service endpoints that handle IPv4 and IPv6, replicate data over either protocol, and preserve network connections and security during migration. During testing and cutover you can launch target servers in IPv4, IPv6, or dual-stack configurations. This capability is available in Regions that support AWS MGN and Amazon EC2 dual-stack endpoints.

🔒 AWS reiterates its commitment to raising cybersecurity standards across the European Union, positioning security as a core responsibility across its global operations. The post explains how AWS supports customers in meeting the NIS 2 Directive (EU 2022/2555) and related Implementing Regulation (EU 2024/2690) through services, audited controls, and guidance. It highlights certifications, regional accreditations, and tools—such as AWS Security Hub, AWS Config, and AWS CloudTrail—that help entities meet governance, incident reporting, and resilience obligations. The blog also describes AWS collaboration with national authorities and programs that provide templates, training, and operational engagement to improve readiness and compliance.